Security
فارسی
All products

Red Hat OpenShift Dev Spaces/devspaces/code-rhel8

Red Hat · Package
29 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
form-data uses unsafe random function in form-data for choosing boundaryCVE-2025-7783 · GHSA-FJXV-7RQG-78G4 form-dataLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat Critical Fix reported
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URLCVE-2025-27152 · GHSA-JR5F-V2JV-69X6 axiosCryostat 3/io.cryostat-cryostat3 npmRed Hat High Fix reported
path-to-regexp contains a ReDoSCVE-2024-52798 · GHSA-RHX6-C78J-4Q9W path-to-regexpLogging Subsystem for Red Hat OpenShift/openshift-logging/kibana6-rhel8 npmRed Hat High Fix reported
Axios is vulnerable to DoS attack through lack of data size checkCVE-2025-58754 · GHSA-4HJH-WCWX-XVWJ axiosMigration Toolkit for Applications 8/mta/mta-ui-rhel9 npmRed Hat High Fix reported
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25288 · GHSA-H5C3-5R3R-RR8Q @octokit/plugin-paginate-restMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
cookie accepts cookie name, path, and domain with out of bounds charactersCVE-2024-47764 · GHSA-PXG6-PF52-XH8X cookieCryostat 3/cookie npmRed Hat Low Fix reported
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSSCVE-2024-43788 · GHSA-4VVJ-4CPR-P986 webpackLogging Subsystem for Red Hat OpenShift/openshift-logging/logging-view-plugin-rhel8 npmRed Hat Medium Fix reported
ws affected by a DoS when handling a request with many HTTP headersCVE-2024-37890 · GHSA-3H5V-Q93C-6H6Q ws.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed Hat High Fix reported
Denial of service while parsing a tar file due to lack of folders count validationCVE-2024-28863 · GHSA-F5X3-32G6-XQ36 node-tartar npmRed Hat Medium Fix reported
follow-redirects' Proxy-Authorization header kept across hostsCVE-2024-28849 · GHSA-CXJH-PQWP-8MFP follow-redirectsCryostat 2/follow-redirects npmRed Hat Medium Fix reported
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25285 · GHSA-X4C5-C7RF-JJGV @octokit/endpointMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic BacktrackingCVE-2025-25290 · GHSA-RMVR-2PP2-XJ38 @octokit/requestMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 npmRed Hat Medium Fix reported
DOMPurify allows Cross-site Scripting (XSS)CVE-2025-26791 · GHSA-VHXF-7VQR-MRJG dompurifyCryostat 3/cryostat/cryostat-rhel9 npmRed Hat Medium Fix reported
Follow Redirects improperly handles URLs in the url.parse() functionCVE-2023-26159 · GHSA-JCHW-25XP-JWWC follow-redirectsCryostat 2/follow-redirects npmRed Hat Medium Fix reported
semver vulnerable to Regular Expression Denial of ServiceCVE-2022-25883 · GHSA-C2QF-RXJJ-QQGW semverMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat High Fix reported
Prototype Pollution in JSON5 via Parse MethodCVE-2022-46175 · GHSA-9C47-M6QQ-7P4H json5Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-ui-rhel8 npmRed HatWordPress High Fix reported
Got allows a redirect to a UNIX socketCVE-2022-33987 · GHSA-PFRX-2Q88-QQ97 got.NET 6.0 on Red Hat Enterprise Linux/rh-dotnet60-dotnet npmRed HatWordPress Medium Fix reported
tough-cookie Prototype Pollution vulnerabilityCVE-2023-26136 · GHSA-72XF-G2V4-QVF3 tough-cookieMigration Toolkit for Applications 6/mta/mta-ui-rhel9 npmRed Hat Medium Fix reported
http-cache-semantics vulnerable to Regular Expression Denial of ServiceCVE-2022-25881 · GHSA-RC47-6667-2J5J org.webjars.npm:http-cache-semanticshttp-cache-semantics MavennpmRed HatWordPress High Fix reported
Axios Cross-Site Request Forgery VulnerabilityCVE-2023-45857 · GHSA-WF5P-G6VW-RHXX axiosCryostat 2/axios npmRed Hat Medium Fix reported